What is CVE-2010-4165?

CVE-2010-4165 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.9 out of 10, classified as a Divide By Zero flaw (CWE-369). CVE-2010-4165 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2010-4165?

CVE-2010-4165 has a CVSS score of 4.9 out of 10, rated Medium severity. The vector string is AV:L/AC:L/Au:N/C:N/I:N/A:C.

Is there a patch available for CVE-2010-4165?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2010-4165 patch availability.

Is CVE-2010-4165 actively exploited?

CVE-2010-4165 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Divide By Zero (CWE-369)?

The product divides a value by zero, causing a crash or unexpected behaviour. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/369.html

CVE-2010-4165

Medium

The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.

Package Linux Kernel

Published 2010-11-22

Last modified 2026-04-29

CVSS version 2.0

Patch available

Awaiting data

CVSS 2.0 score

4.9

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

User Interaction

Scope

Confidentiality

Low

Integrity

None

Availability

Vector string

AV:L/AC:L/Au:N/C:N/I:N/A:C

Weakness type

CWE-369

CVE-2010-4165 is a Divide By Zero vulnerability

What is Divide By Zero?

The product divides a value by zero, causing a crash or unexpected behaviour. Learn more on MITRE CWE

References

23 total

Securityreason
http://securityreason.com/securityalert/8111

Exploit Third Party Advisory
Securityreason
http://securityreason.com/securityalert/8123

Exploit Third Party Advisory
Openwall
http://www.openwall.com/lists/oss-security/2010/11/12/1

Mailing List Patch Third Party Advisory
Openwall
http://www.openwall.com/lists/oss-security/2010/11/12/4

Mailing List Patch Third Party Advisory
Spinics
http://www.spinics.net/lists/netdev/msg146405.html

Mailing List Patch Third Party Advisory

Showing 5 of 23 references View all on NVD

Details

CVE ID CVE-2010-4165

Severity Medium

CVSS score 4.9 / 10

CVSS version 2.0

Published 2010-11-22

Modified 2026-04-29

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2010-4165?

CVE-2010-4165 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.9 out of 10 , classified as a Divide By Zero flaw (CWE-369) . CVE-2010-4165 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2010-4165?

CVE-2010-4165 has a CVSS score of 4.9 out of 10, rated Medium severity (CVSS 2.0). The vector string is AV:L/AC:L/Au:N/C:N/I:N/A:C.
Is there a patch available for CVE-2010-4165?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2010-4165 patch availability.
Is CVE-2010-4165 actively exploited?

No. CVE-2010-4165 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.